Homeland 
Security 

Daily Open Source Infrastructure Report 

04 March 2014 

Top Stories 

• A severe winter storm dumped snow and brought freezing temperatures throughout the 
Midwest and East Coast, prompting the closure of federal government offices, school 
closures, flight cancellations, and causing thousands to lose power March 3. - CNN (See 
item 1) 

• Las Vegas Sands announced that cyberattacks compromised employee and customer data 
from its Sands Bethlehem casino in Bethlehem, Pennsylvania, potentially exposing 
banking and personal information. - Softpedia (See item 11) 

• The owner of a Palatine, Illinois-based industrial equipment company and the owner of 
former machine tools company based in Carlisle, Pennsylvania, were indicted February 28 
for allegedly running a scheme to fraudulently obtain $190 million in financing. - U.S. 
Attorney's Office, Northern District of Illinois (See item 13) 

• A portion of the northbound lanes of Interstate 25 in south Denver were shut down for 
several hours after sudden snow caused about 104 vehicles to crash in a roughly 2-mile 
stretch of highway March 2. - Associated Press (See item 16) 
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Energy Sector 



1. March 3, CNN - (National) One more time: Snow, sleet, misery fall on East Coast. 

A severe winter storm dumped snow and brought freezing temperatures throughout the 
Midwest and East Coast, prompting the closure of federal government offices, school 
closures, about 2,000 flight cancellations, and causing thousands to lose power across 
several States March 3. 

Source: http://www.cnn.com/2014/03/03/us/winter-storm/index.html 

2. March 3, KTXL 40 Sacramento - (California) Thousands of SMUD customers 
without power after SUV plows through power pole. An SUV crashed into a power 
pole in Sacramento March 2, causing more than 20,000 Sacramento Municipal Utility 
District customers to lose power before crews were able to reroute service. 

Source: http://fox40.corn/2014/03/02/thousands-of-smud-customers-without-power- 
after-suv-plows-through-power-pole/ 

3. March 3, Longview News-Journal - (Texas; Louisiana) Thousands of east Texans 
without power as freezing rain blankets area. More than 22,000 AEP Southwestern 
Electric Power Co. (SWEPCO), customers lost service March 2 due to freezing rainfall 
and sleet throughout east Texas and northwest Louisiana. 

Source: http://www.news-iournal.com/news/local/winter-storm-waming-issued-for- 
nmeh-of-east-texas/arliele 1 9ffb820-a259- 1 1 e3-ab 1 2-00 1 a4bef8S7a.html 

4. March 2, Cleveland News-Herald - (Ohio) Power outages in Lake County; 
transformer ‘explodes’ in Fairport Harbor, Mentor-on-the-Lake police say. Police 
departments in multiple cities in Lake County reported that several transformers in 
Fairpoint Harbor exploded and caused 42,950 customers to lose power March 1 . 

Source: http://www.news-herald.com/general-news/201403Q2/update-power-outages- 
in-lake-county-transformer-explodes-in-fairport-harbor-mentor-on-the-lake-police-say 

5. March 2, Washington Observer-Reporter - (Pennsylvania) Third well capped in 
Dunkard Township. Crews capped a third well at the Chevron gas well pad in 
Dunkard Township in Greene County after a February 11 explosion that killed a worker 
and injured another. Officials stated that a new well head was installed March 1 on the 
well that was not leaking, but had been monitored. 

Source: http://www.observer-reporter.com/article/20140302/NEWS01/140309916 

6. March 1, Racine Journal Times - (Wisconsin) Just 100 pounds of coal remain at 
trail derailment site. Officials stated that only about 100 pounds of coal remained at a 
crash site in Caledonia, Wisconsin, where 19 Union Pacific train cars derailed and 
dumped hundreds of tons of coal in January, due to the ground being frozen. Crews will 
clean up the remaining coal once temperatures are warmer. 

Source: http://iournaltimes.com/news/local/just-pounds-of-coal-remain-at-train- 
derailment .he/article 53e9640a-a0d8~ 1 1 e3-89 1 7- 
0019bb2963f4.html?comment form=true 
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7. February 28, KTLA 5 Los Angeles - (California) Storm knocks out power to tens of 
thousands of SoCal homes. Southern California Edison and Los Angeles Department 
of Water and Power crews worked to restore power to more than 36,000 customers 
after a severe storm knocked out electricity February 28. 

Source: http://ktla.com/2014/02/28/socal-storm-thousands-of-power-outages- 
reported/#axzz2uuOB V yTN 

8. February 28, Associated Press - (North Carolina) Violations issued against Duke for 
coal ash spill. The North Carolina Department of Environment and Natural Resources 
issued two formal notices to Duke Energy February 28 stating that the company will be 
cited for violating environmental standards in connection with a massive coal ash spill 
that began February 2 and coated 70 miles of the Dan River with toxic sludge. 

Source: http://charlotte.cbslocal.com/2014/02/28/violations-issued-against-duke-for- 
coal-ash-spill/ 

9. February 28, Milford Mirror - (Connecticut) Fire department responds to gas leak 
at Milford Power Company. The Milford Power Company in Connecticut shut down 
operations and a gas line for several hours February 28 after a leak from a Southern 
Connecticut Gas Company high pressure gas pipe that supplies the power plant. The 
fire department cleared the scene after stopping the leak. 

Source: http://www.milfordmirror.com/13345/fire-department-responds-to-gas-leak-at- 
milford-power-company/ 

For additional stories, see items 20 and 25 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

10. February 28, Connecticut Day - (Connecticut) Unit 2 at Millstone partially shut 
down Thursday. Operators at the Millstone Power Station in Waterford began 
powering down the Unit 2 reactor February 27 after a battery that powers emergency 
safety equipment was found to not be working. The reactor was reduced to 20 percent 
power when crews bypassed the battery, and the reactor returned to near full power 
February 28. 

Source: http://www.thedav.com/article/20140228/NWS01/14Q229686/1047 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

11. March 1, Softpedia - (International) Casino operator Las Vegas Sands admits 
hackers have stolen customer data. Las Vegas Sands announced that cyberattacks 
which defaced some of its Web sites also compromised employee and customer data 
from its Sands Bethlehem casino in Bethlehem, Pennsylvania, potentially exposing 
credit card and bank account information, Social Security numbers, and other personal 
information. The company is continuing its investigation of the breach. 

Source: http://news.softpedia.com/news/Casino-Qperator-Las-Vegas-Sands-Admits- 
Hackers-Stole-Customer-Data-430Q17.shtml 

12. February 28, WMAQ 5 Chicago - (Illinois) First American Bank reports data 
breach in Chicago taxis. First American Bank announced that it has received reports 
of fraudulent charges after customers used taxis in Chicago that utilize two companies 
to process transactions. The bank is continuing to investigate the fraudulent 
transactions. 

Source: http://www.nbcchicago.com/news/local/First-American-Bank-Alleges-Data- 
Breach-from-Chicago-Taxis-247899551.html 

13. February 28, U.S. Attorney's Office, Northern District of Illinois - (Illinois; 
Pennsylvania) Two executives indicted in alleged $190 million equipment financing 
fraud scheme that caused $100 million loss to lenders. The owner of Palatine, 
Illinois-based Equipment Acquisition Resources Inc., and the owner of former Machine 
Tools Direct Inc., based in Carlisle, Pennsylvania, were indicted February 28 for 
allegedly running a scheme to fraudulently obtain $190 million in financing, causing 
$100 million in losses for lenders. 

Source: http://www.fbi.gov/chicago/press-releases/2014/two-executives-indicted-in- 
alleged-190-milhon-equipment-financing-fraud-scheme-that-caused- 100-million-loss- 
to-lenders 

14. February 28, IDG News Service - (International) Gameover malware tougher to kill 
with new rootkit component. Sophos researchers reported that a new variant of the 
Gameover banking malware that steals online banking credentials includes a kernel- 
level rootkit called Necurs that can make the malware more difficult to remove from 
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infected systems. 

Source: http://www.networkworld.com/news/2014/022814-gameover-malware- 
tougher-to-kill-279308.html 

15. February 27, WPVI 6 Philadelphia - (Delaware; Pennsylvania) Masked post office 
bandit indicted on bank robbery charges. A man was indicted for allegedly robbing 
two banks and two post offices in Delaware County, Pennsylvania, and Wilmington, 
Delaware, during January. 

Source: http ://abclocal. go .com/wp vi/story?id=944727 3 
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Transportation Systems Sector 

16. March 2, Associated Press - (Colorado) 1 killed, 30 injured in massive Colorado 
pileup. A portion of the northbound lanes of Interstate 25 in south Denver were shut 
down for several hours after sudden snow caused about 104 vehicles to crash in a 
roughly 2-mile stretch of highway March 2, killing 1 person and injuring several others. 
Source : http://www.vcstar.com/news/2014/mar/02/l-killed-30-iniured-in-massive- 
colorado-pileup/ 

17. March 2, Associated Press - (Indiana) Icy roads in S. Indiana make driving 
conditions hazardous. A late winter storm in Indiana caused 14 counties to post travel 
watches recommending only essential travel March 2 after about 9 inches of snow and 
ice glazed roads and caused highway closures and accidents throughout the State. 
Source: http://www.ctpost.com/news/article/Icv-roads-in-S-Indiana-make-driving- 
hazardous-5282278.php 

18. March 2, Associated Press - (Montana) Train derailment sends 45 empty coal cars 
off tracks in western Montana. A portion of Highway 93 near Olney was closed for 
several hours March 1 after 45 empty rail cars derailed when some of the derailed cars 
were on a bridge over the highway. Trains were held at nearby stations until the tracks 
were cleared. 

Source: 

http ://w w w . therepublic .com/view/storv/09a0 1 900f3bd4ed395 5b206925 7 8f0e2/MT— 
Train-Derailment 

19. March 2, Murrieta Patch - (California) Ortega Highway to remain closed until rain 
lets up, spokeswoman says. Around 30 miles of the Ortega Highway between Orange 
and Riverside counties were closed February 28 and remained closed through March 2 
due to debris and mud that covered several lanes of the highway following heavy rains. 
Source: http://murrieta.patch.com/groups/around-town/p/ortega-highwav-to-remain- 
close-until-rain-lets-up-spokeswoman-says 

20. March 2, Associated Press - (New York) Crude oil rail tankers derail outside 
Albany; no spills. Authorities are investigating a February 28 derailment of tank cars 
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carrying crude oil at the Selkirk rail yard near Albany. No oil was released from the 
cars and the cars were re-railed by March 1. 

Source : http://auburnpub.com/ap/state/crude-oil-rail-tankers-derail-outside-albany-no- 
spills/article d8e699b7-6d98-52f0-b549-d31045e2b83c.html 

For additional stories, see items 1, 15, and 28 
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Food and Agriculture Sector 

21 . March 2, KDUZ 1260 AM Hutchinson/KARP 106.9 FM Dassel - (Minnesota) Barn 
fire kills hundreds of pigs. Officials are investigating the cause of a February 28 fire 
that destroyed 3 barns at a Langhorst Pork Inc. farm near Lafayette, Minnesota, and 
killed about 960 hogs. 

Source: http://www.kduz.com/2014/03/02/barn-fire-kills-hundreds-of-pigs/ 

22. February 28, U.S. Food and Drug Administration - (International) Mars Food North 
America voluntarily recalls specific batch and item number representing less than 
3,500 cases — No other UNCLE BEN’S products affected. The U.S. Food and Drug 
Administration announced that Mars Food North America recalled approximately 
3,500 cases of its Uncle Ben’s Ready Rice Original Long Grain White Rice product as 
a result of punctures to the pouch packaging. 

Source: http://www.fda.gov/Safety/Recalls/ucm387764.htm 

[ Return to top ] 

Water and Wastewater Systems Sector 

23. March 3, KTXL 40 Sacramento - (California) Water main break leaves Rancho 
Cordova neighborhood without water. A mobile home park in Rancho Cordova was 
without water for more than 24 hours after a water main break caused thousands of 
gallons of water to spill out of a fire hydrant March 2. Repairs were expected to be 
completed March 3. 

Source: http://fox40.com/2014/03/02/water-main-break-leaves-rancho-cordova- 
neighborhood- without-water/ 

24. March 2, Gainesville Times - (Georgia) County landfill gets new water treatment 
system. The Hall County Landfill replaced their old leachate system with a new $1.2 
million water treatment system after the old system broke down. The new system will 
process about 8,000 more gallons of leachate water a day. 

Source: http://www.gainesvilletimes.eom/section/6/article/96308/ 

25. March 1, KOCO 5 Oklahoma City - (Oklahoma) Work underway to make repairs 
after power, water outage. Oklahoma Gas and Electric officials reported that 
electricity problems at a water plant March 1 caused residents to have low water 
pressure or no water service. The disruption also left about 4,000 customers without 
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power. 

Source: http://www.koco.com/news/oklahomanews/okc/low-water-pressure-reported- 
in-oklahoma-city/247 5 1 406#mid= 18514103 
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Healthcare and Public Health Sector 

26. March 3, Hudson County Jersey Journal - (New Jersey) Firefighters sent to hospital 
after exposure to coolant at nursing home fire. Twenty-five Saint Ann nursing home 
residents were evacuated February 28 after a fire at the Jersey City building sent 9 
firefighters to area hospitals for possible exposure to hazardous materials after they 
were exposed to a coolant from a damaged air conditioning unit. 

Source: http://www.ni.com/iiournal- 
news/index.ssf/2014/03/firefighters sent to hospital.html 
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Government Facilities Sector 

27. March 3, Reuters - (Nevada) Navy confirms U.S. jet lighter pilot killed in Nevada 
crash. The U.S. Navy announced March 3that the pilot of an F/A-18C fighter jet was 
killed after the aircraft crashed at the Fallon Range Training Complex in Nevada March 
1 during a training mission. 

Source: http://www.chicagotribune.com/news/sns-rt-us-usa-navy-fighter- 
20140301.0,29848 17.story 

28. March 3, WTVF 5 Nashville - (Tennessee) Snow moving into middle Tennessee after 
messy commute. Several school systems were closed or delayed in Tennessee March 3 
due to freezing rain and icy road conditions which also caused more than 40 vehicle 
accidents. All Metropolitan Transit Authority buses operated on a snow route detour 
schedule, causing buses not to stop or delaying pickup. 

Source: http://www.newschannel5.com/storv/24861095/metro-nashville-public- 
schools-closed-monday 

29. March 1, Noozhawk.com - (California) Storm surf forces evacuation, closure of 
Goleta Beach County Park. Goleta Beach County Park in Santa Barbara County was 
shut down and evacuated March 1 due to high tides and heavy surf which caused 
significant damage to the park, including Goleta Pier and Beachside Bar-Cafe 
restaurant. 

Source: 

http://www.noozhawk.com/article/goleta beach evacuated closed due to tidal threat 
s 20140301 

For another story, see item 1 
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Emergency Services Sector 

See item 26 
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Information Technology Sector 

30. March 3, Softpedia - (International) Meetup down for days due to DDoS attack 
allegedly ordered by a competitor. Social networking portal Meetup was hit by a 
distributed denial of service (DDoS) attack beginning February 27 that took the portal's 
Web site offline for several days. An attacker contacted the company, claimed 
responsibility, and demanded a payment to end the attack. 

Source: http://news.softpedia.com/news/Meetup-com-Down-for-Davs-Due-to-DDOS- 
Attack-Allegedly-Ordered-by-a-Competitor-43029Q.shtml 

31. March 1, Softpedia - (International) Uroburos: Espionage rootkit allegedly created 
by Russian intelligence agency. Researchers at G Data analyzed a sophisticated 
rootkit dubbed Uroburos that can compromise Windows systems in order to execute 
commands, steal files, capture traffic, and add new modules to itself. The researchers 
believe the rootkit was created by a Russian intelligence agency and has been in 
operation since 2011. 

Source: http://news.softpedia.com/news/Uroburos-Espionage-Rootkit-Allegedly- 
Created-bv-Russian-Intelligence-Agency-430030.shtml 

For another story, see item 14 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



32. March 3, WBKO 13 Bowling Green - (Kentucky) Fire off Old Porter Pike in Bowling 
Green. Authorities are investigating a fire that damaged at least 80 percent of a 
Bowling Green, Kentucky strip mall March 2. 
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Source: http://www.wbko.com/news/headlines/Fire-on-01d-Porter-Pike-in-Bowling- 
Green-248138841.html 



33. March 3, WAFF 48 Huntsville - (Alabama) Officials: Mentone hotel fire likely 
electrical. Officials believe a fire that destroyed the historical Mentone Springs Hotel 
and neighboring White Elephant Antique store in DeKalb County March 1 was 
electrical in nature and started in a fuse or electrical box. 

Source: http://www.waff.com/storv/24864864/officials-sav-mentone-fire-likely- 
electrical 

34. March 2, WVFT 30 New Britain - (Connecticut) Families displaced by fire. Twenty- 
five families were evacuated and temporarily displaced after a fire broke out in a 
carport located beneath a Hartford apartment building March 2 that damaged the 
building’s electrical and water systems. 

Source: http://connecticut.cbslocal.com/2014/03/02/families-displaced-by-fire/ 

35. March 2, Oklahoma City Oklahoman - (Oklahoma) Woodward apartment fire leaves 
40 people without homes. A March 2 fire at the Briarwood Apartments in Woodward 
left about 40 residents displaced. Authorities are investigating the cause of the fire. 
Source: http://newsok.com/woodward-apartment-fire-leaves-40-people-without- 
homes/article/3939212 

36. March 2, New Hampshire Union Leader - (New Hampshire) Underground propane 
leak prompts Lebanon evacuation. Two Lebanon, New Hampshire apartment 
buildings were evacuated for nearly 3 hours March 1, prompted by a gas leak from a 
1,000 gallon underground propane tank. Crews repaired the leak and officials believe 
expanding ice in the valve pit of the tank forced the main valve open and allowed gas to 
escape. 

Source: http://www.unionleader.com/article/20140302/NEWS07/14030988Q 

37. March 2, Associated Press; Cherry Hill Courier-Post - (New Jersey) Apartment 
complex fire displaces 19 residents. A fire at the Bellmawr Manor apartment complex 
in New Jersey caused the building’s roof to collapse, damaged 8 units, and left 19 
residents displaced March 1 . 

Source: http://www.niherald.com/story/24864100/apartment-complex-fire-displaces- 
1 9-residents 

38. March 1, WDJT 58 Milwaukee - (Wisconsin) Greenfield apartment fire leaves 
several displaced. A Greenfield, Wisconsin apartment building was engulfed by fire 
March 1 and 41 residents were left displaced. Officials believe the blaze started in the 
basement of the complex. 

Source: http://www.cbs58.com/news/local-news/Greenfield-apartment-fire-leaves- 
several-displaced-248055501 .html 
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Dams Sector 



39. March 2, KEPR 19 Kennewick - (Washington) 65-foot crack found in Wannapum 
Dam. Officials of the Grant County Public Utility District lowered the water levels on 
the Wanapum dam after learning of a 65 -foot long crack in the structure beneath the 
water level. The 50 year old structure is being inspected for repairs that could take up to 
a month to complete. 

Source : http://www.keprtv.com/news/local/Wanapu-Dam-Cracks-248052861.html 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
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Contact Information 
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Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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